Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135372e302f32342d3234203d3e203631383035.roa
File:                     3230302e3232392e3135372e302f32342d3234203d3e203631383035.roa (raw, json)
Hash identifier:          1Mcw13kFgelSv+1l9NgzEE3OCIPJ/Ui0BA5xHHMrCbw=
Subject key identifier:   E2:70:99:11:96:5B:CA:74:73:18:01:C4:26:4A:96:BE:92:E9:07:FE
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       2C311FAD61CE65797455F5323F6C9F4CAC084F86
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135372e302f32342d3234203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:33:04 +0000
ROA not before:           Thu 25 Apr 2024 19:28:04 +0000
ROA not after:            Thu 24 Apr 2025 19:33:04 +0000
asID:                     61805
IP address blocks:        200.229.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:31:1f:ad:61:ce:65:79:74:55:f5:32:3f:6c:9f:4c:ac:08:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:28:04 2024 GMT
            Not After : Apr 24 19:33:04 2025 GMT
        Subject: CN=E2709911965BCA74731801C4264A96BE92E907FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:05:71:59:c3:e2:29:29:a9:8c:f6:47:c4:
                    43:62:bc:65:c1:1d:7f:2a:06:55:91:86:46:6b:b0:
                    8a:e5:c0:3e:f6:a1:78:54:60:0f:8d:da:7f:4c:11:
                    5e:04:d9:e5:84:6e:70:a4:03:2e:e1:e1:3e:04:86:
                    d6:a0:1d:f6:14:da:68:5d:52:24:93:75:a2:4e:f4:
                    b9:ab:c2:06:99:75:3a:dd:13:0f:32:3d:76:46:d9:
                    90:df:ba:ce:16:93:bc:ba:c0:89:51:cc:04:16:06:
                    5f:ec:ce:c4:a0:48:99:23:c6:51:a1:f3:49:a5:91:
                    bb:38:7e:2a:f8:1a:b4:7e:d1:68:98:ab:5c:4b:68:
                    7d:d3:cd:11:88:10:f2:2e:8b:0d:ee:fa:57:78:c5:
                    ac:35:ed:9b:f0:a7:d0:9d:b8:a4:5e:cb:74:98:6c:
                    58:27:8d:50:a8:8a:d9:5a:0b:c3:39:1d:2e:ba:fe:
                    e3:fc:f5:64:bc:ed:b1:25:c8:95:c8:98:4b:33:38:
                    e1:f0:4a:98:3c:14:4f:5a:ae:4e:fa:60:1c:71:c4:
                    78:aa:de:09:83:ca:f3:19:5b:25:0d:be:3b:1b:03:
                    dc:e2:09:c3:c0:86:dd:96:e1:b8:9e:76:9b:12:85:
                    c9:84:79:b4:66:b2:2e:1a:e0:a0:cb:4e:8d:80:69:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:99:11:96:5B:CA:74:73:18:01:C4:26:4A:96:BE:92:E9:07:FE
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135372e302f32342d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:c8:26:47:38:22:bc:1e:80:95:96:dc:48:0a:7d:5d:c5:
         1c:ac:93:b5:27:73:e4:35:6c:0d:58:f7:42:00:37:14:02:d4:
         39:ea:c5:47:ec:e7:92:92:14:8a:20:5f:77:8d:0a:f6:4e:06:
         a5:43:c1:de:08:79:cc:05:65:1b:b6:67:ba:02:16:72:a4:6d:
         61:ca:c5:cc:14:90:50:5b:45:76:4c:b7:8b:f7:4b:67:56:5c:
         22:da:69:2c:77:6f:86:58:5d:b3:11:a6:bd:9a:59:28:ab:37:
         39:84:f3:ae:54:70:89:fa:ec:4b:a4:c1:2c:a9:a5:a5:f7:dd:
         83:db:43:10:00:25:cf:a7:66:a9:bc:d6:1a:13:c0:7e:ed:23:
         c0:b5:c0:a4:a3:c0:3e:7e:93:aa:65:f5:4d:de:fd:3e:38:c2:
         d4:a1:4a:1a:f6:a7:d7:68:9e:2f:5a:d5:fe:7c:35:7f:47:5b:
         06:5d:b4:aa:bb:81:8b:8a:2e:68:e1:c1:f9:c0:64:ce:2b:2f:
         c7:9b:4c:b5:e3:18:8f:42:96:c2:9a:0c:df:fb:69:e8:a0:f7:
         c7:d4:90:79:3d:80:44:c5:c9:02:30:74:a4:2b:e3:10:c9:29:
         57:08:d1:c9:e2:be:94:6d:63:22:c7:fe:3b:71:b9:10:3c:3e:
         09:20:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org